You might want to look at the examples included with the latest version of File::Scan. They have included a procmail virus scanner script that uses MIME::Parser.